Function OptionalAuth

server-source-code/internal/middleware/auth.go:104–135

OptionalAuth returns a middleware that parses JWT when present and sets user context. Does not return 401 when token is missing; continues to next handler.

(cfg *config.Config)

// OptionalAuth returns a middleware that parses JWT when present and sets user context.
// Does not return 401 when token is missing; continues to next handler.
func OptionalAuth(cfg *config.Config) func(http.Handler) http.Handler {
	return func(next http.Handler) http.Handler {
		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
			token, _ := extractToken(r)
			if token == "" {
				next.ServeHTTP(w, r)
				return
			}
			claims := jwt.MapClaims{}
			t, err := jwt.ParseWithClaims(token, &claims, func(_ *jwt.Token) (interface{}, error) {
				return []byte(cfg.JWTSecret), nil
			})
			if err != nil || !t.Valid {
				next.ServeHTTP(w, r)
				return
			}
			userID, _ := claims["sub"].(string)
			role, _ := claims["role"].(string)
			sessionID, _ := claims["sessionId"].(string)
			if userID != "" {
				ctx := r.Context()
				ctx = context.WithValue(ctx, UserIDKey, userID)
				ctx = context.WithValue(ctx, UserRoleKey, role)
				if sessionID != "" {
					ctx = context.WithValue(ctx, SessionIDKey, sessionID)
				}
				r = r.WithContext(ctx)
			}
			next.ServeHTTP(w, r)
		})
	}
}

func extractToken(r *http.Request) (token, source string) {
	if auth := r.Header.Get("Authorization"); auth != "" {